5-7 years of hands-on engineering experience in security roles
Proven experience securing enterprise SaaS, particularly in fintech or regulated industries
Familiarity with AWS, Kubernetes, and infrastructure as code practices
Experience with AI-powered products and systems
Demonstrated ability to guide a company through various stages of security maturity
Responsibilities
Own and develop Petual's overall security strategy and roadmap
Collaborate with engineering teams on security for applications, cloud, and infrastructure
Enhance vulnerability management and incident response processes
Conduct security reviews for enterprise customers as a trusted advisor
Lead the evolution of the compliance program to meet new regulatory frameworks
Benefits
Opportunity to shape and lead the security function from the ground up
Work with a strong technical team with experience from notable companies
Engage in a dynamic environment focused on regulated industries
Access to advanced tools and practices in security and compliance
Potential for professional growth in a rapidly evolving field
Full Job Description
The Opportunity
We're hiring a Security Lead to build and own the security function at Petual. You'll inherit a strong technical baseline infrastructure as code, established cloud and app-security practices, an early compliance program from a team with roots at Retool and Lyft. From there, you'll set the strategy, strengthen our posture, and take us through the compliance frameworks needed to serve regulated industries like banking and federal work.
What You'll Do
Own Petual's security strategy, roadmap, architecture, and day-to-day security program
Partner with engineering on application, cloud, infrastructure, and AI-system security
Advance vulnerability management, incident response, access governance, and detection evaluating tooling to drive leverage
Lead security reviews as a credible counterpart to enterprise customers
Own and evolve our compliance program as we pursue new frameworks
What We're Looking For
Strong hands-on engineering. You write production code, and our interview loop includes a coding exercise
Experience securing enterprise SaaS handling sensitive data, ideally in fintech, GRC, or another regulated space
Experience with AWS, Kubernetes, and infrastructure as code
Experience securing AI-powered products or agentic systems
A track record taking a company through multiple stages of security maturity
